$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: Ef7ayEz05YBdpoPhdUWbR4yWVVbRdSNO+PUQStuRf1E= Subject key identifier: 13:7D:8C:B3:3D:88:A4:84:3D:25:3E:44:67:EA:14:A6:B4:AE:E5:0E Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 61E2426FC2E60DB1C724DACB6A26E31500BAA602 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 017E Signing time: Fri 05 Sep 2025 04:51:54 +0000 Manifest this update: Fri 05 Sep 2025 04:46:54 +0000 Manifest next update: Mon 08 Sep 2025 09:05:54 +0000 Files and hashes: 1: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: e5YZRHLXON/BNKlFZ6pO5SamK2d94mF1HlOTyWKTDGc=) 2: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: hBmchGMN/fVNaE6sdiETaj0MX0seDIVkXhvDCN24afc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e2:42:6f:c2:e6:0d:b1:c7:24:da:cb:6a:26:e3:15:00:ba:a6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Sep 5 04:46:54 2025 GMT Not After : Sep 8 09:05:54 2025 GMT Subject: CN=137D8CB33D88A4843D253E4467EA14A6B4AEE50E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:1b:7d:6a:67:e3:3d:63:8c:ee:fa:e5:a7: 6c:32:6f:5b:6f:bf:3f:62:0f:19:af:cc:fb:89:b2: 64:a7:70:b9:f0:f6:8e:90:fa:77:28:d3:2e:2f:ad: 1a:f9:d4:25:85:84:5c:d8:77:11:f6:bb:0d:b6:46: d6:08:66:89:1b:a6:f0:6b:0f:69:07:a2:28:41:30: 56:8d:09:2e:b9:1e:f6:b3:ac:a8:5c:51:2c:f8:d3: c0:5e:41:9a:ec:7e:b5:25:34:04:42:4b:62:a0:b3: 6d:06:37:63:37:ab:a2:a7:48:9c:e3:a4:7a:69:a0: f9:76:cc:7b:45:00:15:87:2e:2a:16:f0:01:8b:8c: d5:48:c3:66:d0:f1:37:30:e3:65:87:57:96:ee:64: 09:b8:a3:38:96:40:89:4e:20:9f:8c:87:d0:cb:6d: 17:be:0d:01:00:88:3f:67:f0:9a:e5:dd:e1:d4:8c: 45:c9:2d:b2:7e:94:30:79:0b:da:b0:62:20:c1:6e: d9:c8:92:dc:94:01:1a:3c:fb:d3:41:63:8a:c3:e9: bc:1a:6f:6e:e1:15:56:84:52:03:a4:ab:16:cf:e1: 7d:2a:aa:f8:61:ca:78:58:e3:b9:ec:80:12:b1:c8: 45:75:84:11:f8:49:84:ea:c3:f2:53:76:36:65:75: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7D:8C:B3:3D:88:A4:84:3D:25:3E:44:67:EA:14:A6:B4:AE:E5:0E X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f5:00:6c:30:a6:39:59:15:1e:54:82:20:fe:be:26:1c:ae: 16:6a:65:a6:2b:1f:4c:9a:8b:08:ea:28:96:17:95:25:4d:7f: 4c:c9:e4:2f:1f:b8:2c:c3:10:85:b9:7d:08:62:f4:b7:ee:dd: dd:33:e3:a9:e2:f0:e2:8e:17:96:b7:a8:e1:5f:8b:96:86:96: 59:c8:dc:ba:bf:a7:0e:e8:6d:d8:4f:46:16:4f:9a:5b:5b:56: 23:7d:7a:c8:10:be:fb:1f:c5:3f:93:fe:f3:2d:bc:57:ca:1a: 8d:98:e9:f5:93:d9:04:a7:a4:03:f1:f1:f6:3d:4b:05:3f:f7: 6c:ca:33:d3:c0:01:ef:3c:af:ce:78:5d:7f:05:ef:d2:52:60: 12:4e:d9:55:82:92:be:92:bb:d9:b9:72:7e:f7:53:8a:2f:68: 6b:4b:7e:03:2d:d3:25:7f:4b:da:d7:ba:47:19:9c:2e:88:22: 9c:f3:82:62:69:c6:b4:bd:80:1d:72:bf:e1:88:e3:1d:8c:ed: 36:f1:40:4b:34:9f:1a:b1:68:cb:b2:56:1a:0f:d4:64:03:fd: 26:eb:47:44:e7:87:70:1f:a0:fa:67:ff:57:a7:17:48:27:1e: 83:26:8c:4c:c8:5c:93:76:d6:c3:67:3b:22:ed:b5:00:d8:cc: 12:01:a7:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYeJCb8LmDbHHJNrLaibjFQC6pgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNTA5MDUwNDQ2NTRaFw0yNTA5MDgwOTA1NTRaMDMxMTAvBgNV BAMTKDEzN0Q4Q0IzM0Q4OEE0ODQzRDI1M0U0NDY3RUExNEE2QjRBRUU1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYpxt9amfjPWOM7vrlp2wyb1tv vz9iDxmvzPuJsmSncLnw9o6Q+nco0y4vrRr51CWFhFzYdxH2uw22RtYIZokbpvBr D2kHoihBMFaNCS65HvazrKhcUSz408BeQZrsfrUlNARCS2Kgs20GN2M3q6KnSJzj pHppoPl2zHtFABWHLioW8AGLjNVIw2bQ8Tcw42WHV5buZAm4oziWQIlOIJ+Mh9DL bRe+DQEAiD9n8Jrl3eHUjEXJLbJ+lDB5C9qwYiDBbtnIktyUARo8+9NBY4rD6bwa b27hFVaEUgOkqxbP4X0qqvhhynhY47nsgBKxyEV1hBH4SYTqw/JTdjZldUORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE32Msz2IpIQ9JT5EZ+oUprSu5Q4wHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADP1AGwwpjlZFR5UgiD+viYcrhZqZaYrH0ya iwjqKJYXlSVNf0zJ5C8fuCzDEIW5fQhi9Lfu3d0z46ni8OKOF5a3qOFfi5aGllnI 3Lq/pw7obdhPRhZPmltbViN9esgQvvsfxT+T/vMtvFfKGo2Y6fWT2QSnpAPx8fY9 SwU/92zKM9PAAe88r854XX8F79JSYBJO2VWCkr6Su9m5cn73U4ovaGtLfgMt0yV/ S9rXukcZnC6IIpzzgmJpxrS9gB1yv+GI4x2M7TbxQEs0nxqxaMuyVhoP1GQD/Sbr R0Tnh3AfoPpn/1enF0gnHoMmjEzIXJN21sNnOyLttQDYzBIBp9M= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:56 2025 by rpki-client